CVE Vulnerability Catalog

In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. This will cause a BUG and denial of service.

An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver.

An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver.

An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver.

An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver.

A vulnerability in the web portal framework of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The issue is due to improper input validation of log file content. Successful exploitation could allow arbitrary script execution in the context of the interface or access to sensitive browser-based information.

A vulnerability in the restricted CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker with valid admin credentials to elevate privileges and execute arbitrary commands on the underlying OS as root. The issue is due to insufficient restrictions during execution of an affected CLI command. Successful exploitation could allow privilege escalation and arbitrary command execution as root.

A vulnerability in the SSL/TLS protocol inspection engine of Cisco FTD Software could allow an unauthenticated, remote attacker to bypass configured file policies on an affected system. The issue is due to errors when handling specific SSL/TLS messages. An attacker could exploit this by sending crafted HTTP packets through the system, bypassing policies and delivering a malicious payload to the protected network.

A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to the improper input validation of tar packages uploaded through the Web Portal to the Image Repository. An attacker could exploit this vulnerability by uploading a crafted tar package and viewing the log entries that are generated. A successful exploit could allow the attacker to read arbitrary files on the underlying OS.

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying OS of an affected device. For more details, see the Details section of the advisory.

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying OS of an affected device. For more details, see the Details section of the advisory.

A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to view the admin password in clear text. The issue is due to incorrect logging of the admin password when forced to change the default password on first login. Subsequent password changes are not logged and other accounts are unaffected.

A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to overwrite or read arbitrary files. The attacker would need valid administrator privileges. The issue is due to improper input validation of CLI command arguments. Successful exploitation could allow overwriting or reading arbitrary files on the device.

A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to bypass authentication and gain limited access. The issue is due to incorrect authentication implementation. Successful exploitation could allow viewing limited configuration details and potentially uploading a virtual machine image.

In osTicket before version 1.10.7 and versions 1.12.x before 1.12.1, a stored XSS vulnerability was discovered in setup/install.php. Lack of input sanitization in the firstname and lastname fields allows injection of malicious queries that are then executed.

In osTicket before version 1.10.7 and 1.12.x before 1.12.1, a vulnerability was found in the ticket creation form. Users can upload files, but content checks are insufficient and the server response is not handled properly, leading to persistent XSS. An attacker can upload an .html file, and the Content-Disposition header is set to inline instead of attachment, enabling cookie theft or other malicious actions.

Double Free in VLC versions <= 3.0.6 leads to a crash.

In MISP 2.4.111, a stored XSS vulnerability exists in the event-graph view in app/webroot/js/event-graph.js, triggered when a user toggles the event graph view. A malicious MISP event must be crafted to exploit this vulnerability.

An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.